K.15.13.0012 Software Fix List Contents Description Product Models Enhancements Version K.15.13.0003 Enhancements Version K.15.13.0008 Enhancement Prerequisites Fixes Version K.15.13.0003 Fix List Version K.15.13.0004 Fix List Version K.15.13.0005 Fix List Version K.15.13.0006 Fix List Version K.15.13.0007 (Never Built) Version K.15.13.0008 Fix List Version K.15.13.0009 Fix List Version K.15.13.0010 Fix List Version K.15.13.0011 Fix List Version K.15.13.0012 Fix List Description This fix list covers software versions beginning with K.15.13.0003. Version K.15.13.0003 was the initial release of Major version K.15.13 software. K.15.13.0003 software was built from the same source as K.15.12.0006. K.15.13.0003 includes all enhancements and fixes in K.15.12.0006 software, plus the additional enhancements and fixes in the K.15.13.0003 fix list (below). Here is a visual depiction of the software sequence, showing how each Major version (for example K.15.13) is based on the previous Major version - and then additional fixes are added to Minor versions (for example K.15.13.0004). This depiction shows the three most recent Major versions and all the Minor versions that have been built at the time of this publication. K.15.11.0003 --> K.15.11.0004 --> K.15.11.0005 --> K.15.11.0007 --> K.15.11.0008 --> K.15.11.0009 (K.15.11.0006 was never built) v K.15.12.0006 --> K.15.12.0007 --> K.15.12.0008 --> K.15.12.0009 --> K.15.12.0010 --> K.15.12.0011--> K.15.12.0012 --> K.15.12.0014 --> K.15.12.0015 (K.15.12.0013 was never built) v K.15.13.0003 --> K.15.13.0004 --> K.15.13.0005 -> K.15.13.0006 -> K.15.13.0008 -> K.15.13.0009 --> K.15.13.0010 --> K.15.13.0011 --> K.15.13.0012 (K.15.13.0007 was never built) These documents are included in the K.15.13.0012 software zip file: Release Notes Basic Information Guide K.15.12.0006 Release Notes K.15.13.0012 Fix List Return to Contents page 1 of 17
Product Models HP 3500-24 Switch (J9470A) HP 3500-24-PoE Switch (J9471A) HP 3500-48 Switch (J9472A) HP 3500-48-PoE Switch (J9473A) HP 3500yl-24G-PWR Intelligent Edge Switch (J8692A) HP 3500yl-48G-PWR Intelligent Edge Switch (J8693A) HP 3500yl-24G-PoE+ Switch (J9310A) HP 3500yl-48G-PoE+ Switch (J9311A) HP 5406zl Intelligent Edge Switch (J8697A) HP 5406zl Switch with Premium SW (J9642A) HP 5412zl Intelligent Edge Switch (J8698A) HP 5412 zl Switch with Premium SW (J9643A) HP 5406zl-48G Intelligent Edge Switch (J8699A) HP 5412zl-96G Intelligent Edge Switch (J8700A) HP 5406zl-48G-PoE+ Switch (J9447A) HP 5412zl-96G-PoE+ Switch (J9448A) HP 5406-44G-PoE+/2XG-SFP+ v2 zl Switch (J9533A) HP 5412-92G-PoE+/2XG-SFP+ v2 zl Switch (J9532A) HP 5406-44G-PoE+/4G-SFP v2 zl Switch (J9539A) HP 5412-92G-PoE+/4G-SFP v2 zl Switch (J9540A) HP 5406 8p 10GBASE-T 8p 10GbE SFP+ v2 zl Switch with Premium Software (J9866A) HP 6200yl-24G-mGBIC Switch (J8992A) HP 6600-24G Switch (J9263A) HP 6600-24G-4XG Switch (J9264A) HP 6600-24XG Switch (J9265A) HP 6600-48G Switch (J9451A) HP 6600-48G-4XG Switch (J9452A) HP 8206zl Switch (J9475A) HP 8206 v2 zl Switch with Premium SW (J9640A) HP 8212zl Switch (J8715A, J8715B) HP 8212zl Switch with fan tray (J9091A) HP 8212 v2 zl Switch with Premium SW (J9641A) HP 8206-44G-PoE+/2XG v2 zl Switch with Premium SW (J9638A) HP 8212-92G-PoE+/2XG v2 zl Switch with Premium SW (J9639A) Return to Contents page 2 of 17
Enhancements Version K.15.13.0003 Enhancements Enhancement (CR_0000123302) - Clear DHCP Snooping Counters via CLI. Clears all the statistics counters for DHCP snooping. The statistics are reset to zero. Syntax: clear dhcp-snooping statistics. Enhancement (CR_0000115448) - Disable Debug Without Stopping Syslog. When a syslog server is configured, the forwarding of events begins immediately. The commands no debug event or no debug all no longer have any effect. The only way to disable the forwarding of events to the Syslog server is by removing the server with the no logging <ip-address> command, or the no logging command, which removes all Syslog servers. See "Troubleshooting" in the Management and Configuration Guide for your switch. Enhancement (CR_0000109789) - Identification Field in Static Route Config. When there are a large number of static point-to-point routes, it is helpful to be able to identify the routes using a more meaningful designation than the IP Address. The name option allows you to name each configured static route, or to uniquely identify a set of static routes. See "Static Routing" in the Multicast and Routing Guide for your switch. Enhancement (CR_0000112411) - Local Alarm Threshold. The CLI now supports the configuration of RMON alarm threshold settings. The settings can be saved in the configuration file. See "Configuring for Network Management Applications" in the Management and Configuration Guide for your switch. Enhancement (CR_0000111562) - Per-Interface Syslog Event Enable-Disable. This feature provides a per-port filter that can restrict the logging of events that are associated with a link status change. Unimportant linkup/linkdown events can be filtered out, avoiding unwanted messages in the event log and reducing troubleshooting time. See "Troubleshooting" in the Management and Configuration Guide for your switch. Enhancement (CR_0000111663) - RADIUS Set Port Speed to 10 Mbps. A new RADIUS Vendor Specific Attribute (VSA) - HP-Port-Speed - permits the automated configuration of port speed to 10 Mbps. The port comes up at the auto-negotiated speed during initial authentication, and then the VSA overrides this auto-negotiated speed and configures it to the port speed set in the VSA. A new option, port-speed-vsa, is added to the aaa portaccess command. See "Port-Based and User-Based Access Control (802.1X)" in the Access Security Guide for your switch. Enhancement (CR_0000111892) - sflow Data Over OOBM. This enhancement provides a configurable option for sending sflow packets to a destination through the OOBM port on the switch. The sflow collector collects sample packets through the OOBM port, allowing the monitoring of network traffic. Both IPv4 and IPv6 addresses are supported. See "Configuring for Network Management Applications" in the Management and Configuration Guide for your switch. Enhancement (CR_0000130536) - VRRPv3. Virtual router redundancy protocol (VRRP) provides redundancy in routed networks without requiring configuration of dynamic routing or router discovery protocols. This enhancement adds IPv6 support to VRRP. VRRPv3 supports both IPv4 and IPv6 VRs. VRRPv2 mode is supported for backward compatibility. The maximum number of virtual routers supported stays at 2048, and the maximum number of VRs per VLAN stays at 32. See "Virtual Router Redundancy Protocol (VRRP)" in the Multicast and Routing Guide for your switch. Version K.15.13.0008 Enhancement Enhancement (CR_0000132845) - Additional Debug Capability. This enhancement adds tracking to identify possible switch hang situations during switch boot. Return to Contents page 3 of 17
Prerequisites BootROM Update Included! IMPORTANT: If your switch is running a software version earlier than K.15, your BootROM will be updated when you upload K.15.13.xxxx software to your switch. All switches must be running a BootROM version of K.12.17 or newer in order to load K.15 software. Do not interrupt power to the switch during this important update! A successful update to K.15 software may require multiple steps, depending on your current software and BootROM levels. Please see details in the table below. If your software version is: K.11.11 through K.12.29 (BootROM K.11.00 - K.11.03) K.12.31 through K.13.55 (BootROM K.12.12 - K.12.14) K.13.58 or newer (BootROM K.12.17 or newer; use "show flash" command) Your next step should be: Update and reload into software version K.12.31 or K.12.62 Update and reload into software version K.13.58 or K.13.68 Update directly into software version K.15.13.0012 (BootROM K.15.30) Return to Contents page 4 of 17
Minimum Software Versions Minimum Supported Product Number Product Name Software Version J9546A HP 8-port 10GBase-T v2 zl Module K.15.04.0002 J9310A HP 3500yl-24G-PoE+ Switch K.15.02.0004 J9311A HP 3500yl-48-PoE+ Switch K.15.02.0004 J9312A HP 2-Port SFP+/2-Port CX4 10GbE yl Module K.15.02.0004 J9534A HP 24-port 10/100/1000 PoE+ v2 zl Module K.15.02.0004 J9535A HP 20-port 10/100/1000 PoE+ / 4-port SFP v2 zl Module K.15.02.0004 J9536A HP 20-port 10/100/1000 PoE+ / 2-port 10-GbE SFP+ v2 zl Module K.15.02.0004 J9537A HP 24-port SFP v2 zl Module K.15.02.0004 J9538A HP 8-port 10-GbE SFP+ v2 zl Module K.15.02.0004 J9547A HP 24-port 10/100 PoE+ v2 zl Module K.15.02.0004 J9548A HP 20-port Gig-T / 2-port 10-GbE SFP+ v2 zl Module K.15.02.0004 J9549A HP 20-port Gig-T / 4-port SFP v2 zl Module K.15.02.0004 J9550A HP 24-port Gig-T v2 zl Module K.15.02.0004 J9637A HP 12-port Gig-T / 12-port SFP v2 zl Module K.15.02.0004 J9475A HP 8206zl Switch Base System K.14.34 J9307A HP 24-Port 10/100/1000 PoE+ zl Module K.14.34 J9308A HP 20-Port 10/100/1000 PoE+/4-port MiniGBIC zl Module K.14.34 J9478A HP 24-port 10/100 PoE+ zl Module K.14.34 J9447A HP 5406zl-48G-PoE+ Switch K.14.34 J9448A HP 5412zl-96G-PoE+ Switch K.14.34 J9470A HP 3500-24 Switch K.14.31 J9471A HP 3500-24-PoE Switch K.14.31 J9472A HP 3500-48 Switch K.14.31 J9473A HP 3500-48-PoE Switch K.14.31 J9263A HP Switch 6600-48G K.14.24 J9452A HP Switch 6600-48G-4XG K.14.24 J9263A HP Switch 6600-24G K.14.03 J9264A HP Switch 6600-24G-4XG K.14.03 J9265A HP Switch 6600-24XG K.14.03 J9154A HP ONE Services zl Module K.13.51 J9051A, J9052A HP Wireless Edge Services zl Module, HP Redundant Wireless Services zl Module K.12.43 J8715A, J8715B HP Switch 8212zl Base System K.12.31 J8993A, J8994A Premium Features on Series 3500yl and 5400zl Switches K.11.33 J8706A HP Switch 5400zl 24p Mini-GBIC Module K.11.33 J8708A HP Switch 5400zl 4p 10-GbE CX4 Module K.11.33 J8992A HP Switch 6200yl-24G-mGBIC K.11.33 J8694A HP Switch 3500yl 2p 10GbE X2 + 2p CX4 Module K.11.17 Return to Contents page 5 of 17
Fixes Software fixes are listed in chronological order, from oldest to newest software version. Unless otherwise noted, each software version listed below includes all the software fixes and enhancements added in previous versions listed below. Version K.15.13.0003 Fix List Status : Released and fully supported, and posted on the web. 802.1X (CR_0000134257) - After 802.1X frame counters reach a maximum value of 2,147,483,647, the counters are displayed as negative values that become smaller until they reach zero. When the counters reach zero, they begin incrementing again. Authentication (CR_0000134114) - With both 802.1X and MAC Authentication configured on a port, it is possible for an already-authenticated client to be erroneously moved to the unauthenticated VLAN. CLI (CR_0000128124) - The output of show monitor and show monitor <mirror_destination_number> displays information for only mirror destination #1. CLI (CR_0000131778) - The output of show oobm does not include the MAC address of the OOBM interface. Config (CR_0000124808) - A switch that is upgraded from K.14 to K.15 software or from W.14 to W.15 software has a tilde erroneously added to the community name specified in the snmp-server host command. Config (CR_0000129797) - A config file that has the entry ipv6 ospf3 passive on a tunnel cannot be downloaded to the switch. Config (CR_0000131054) - Setting an operator or manager password on the switch causes four features to be disabled: auto run, DHCP-based config file download from an external tftp server, DHCP-based software image download from an external tftp server, and tftp server functionality within the switch. With this fix, more accurate messages are sent regarding the specific features that are disabled by setting the operator or manager password. Crash (CR_0000118301) - With several trunks that contain a large number of VLANs (on the order of 1000), the switch might reboot unexpectedly with a message similar to Slot A subsystem went down: 07/17/12 18:19:11 K.15.09.0003 1571, Software exception at msgsys.c:552 -- in 'mnsr', task ID = 0xaa2bdc0, -> Can't get message buffer for msgsys_recv. Crash (CR_0000126777) - With a combination of interface state changes along with IPV6 address configuration changes, it is possible for the switch to reboot unexpectedly with a message similar to SubSystem 0 went down: 01/24/13 13:31:29, Invalid Instr HW Addr=0x000004a8 IP=0x4a8, Task='mIpCtrl' Task ID=0xa9ca140 sp:0x470aab0 lr:0x723f4c, msr: 0x02029200 xer: 0x20000000 cr: 0x48000400. Crash (CR_0000127335) - In some situations, issuing the show tech all command might cause the switch to reboot unexpectedly with a message similar to Length Corruption. Crash (CR_0000130339) - In some situations, executing the command show snmp-server traps might cause the switch to reboot unexpectedly with a message similar to Software exception at cli_snmpv2_action.c:9634 -- in msess2', task ID = 0x13ab0 -> ASSERT: failed. Crash (CR_0000131604) - Configuring Mac Authentication with a 256-client limit might cause the switch or stack member to reboot unexpectedly. Return to Contents page 6 of 17
DHCP (CR_0000128754) - If the switch is a DHCP client and the DHCP reply contains option 43 with sub-option codes that conflict with RFC 2132 options, the switch might use incorrect settings such as an incorrect subnet mask. DHCP Snooping (CR_0000126311) - The CLI entry dhcp-snooping option 82 untrusted-policy keep is not included in the config file if no dhcp-snooping option 82 is also configured. If the config file is saved to a TFTP server, it will not function properly when subsequently loaded on a switch. Distributed Trunking (CR_0000132286) - When a MAC address moves from a Distributed Trunk port to a non- Distributed-Trunk port, the switch MAC tables sometimes show that MAC address on the wrong port. Distributed Trunking (CR_0000132900) - With a switch configured for both Distributed Trunking and MSTP, a MAC address learned on a VLAN that is not part of the Inter-Switch Connection (ISC) might not appear in the MAC table, or might appear on the wrong port. This issue has been observed when all the Distributed Trunk ports are down on the switch that learns the MAC address. Dynamic ARP Protection (CR_0000132073) - When a VLAN is configured for dynamic ARP protection and also DHCP snooping, ARP packets should be forwarded but are incorrectly dropped when the arp-protect configuration does not include the validate ip option. Enhancement (CR_0000123302) - Clear DHCP Snooping Counters via CLI. Clears all the statistics counters for DHCP snooping. The statistics are reset to zero. Syntax: clear dhcp-snooping statistics. Enhancement (CR_0000115448) - Disable Debug Without Stopping Syslog. When a syslog server is configured, the forwarding of events begins immediately. The commands no debug event or no debug all no longer have any effect. The only way to disable the forwarding of events to the Syslog server is by removing the server with the no logging <ip-address> command, or the no logging command, which removes all Syslog servers. See "Troubleshooting" in the Management and Configuration Guide for your switch. Enhancement (CR_0000109789) - Identification Field in Static Route Config. When there are a large number of static point-to-point routes, it is helpful to be able to identify the routes using a more meaningful designation than the IP Address. The name option allows you to name each configured static route, or to uniquely identify a set of static routes. See "Static Routing" in the Multicast and Routing Guide for your switch. Enhancement (CR_0000112411) - Local Alarm Threshold. The CLI now supports the configuration of RMON alarm threshold settings. The settings can be saved in the configuration file. See "Configuring for Network Management Applications" in the Management and Configuration Guide for your switch. Enhancement (CR_0000111562) - Per-Interface Syslog Event Enable-Disable. This feature provides a per-port filter that can restrict the logging of events that are associated with a link status change. Unimportant linkup/linkdown events can be filtered out, avoiding unwanted messages in the event log and reducing troubleshooting time. See "Troubleshooting" in the Management and Configuration Guide for your switch. Enhancement (CR_0000111663) - RADIUS Set Port Speed to 10 Mbps. A new RADIUS Vendor Specific Attribute (VSA) - HP-Port-Speed - permits the automated configuration of port speed to 10 Mbps. The port comes up at the auto-negotiated speed during initial authentication, and then the VSA overrides this auto-negotiated speed and configures it to the port speed set in the VSA. A new option, port-speed-vsa, is added to the aaa portaccess command. See "Port-Based and User-Based Access Control (802.1X)" in the Access Security Guide for your switch. Fastboot (CR_0000127452) - With fastboot enabled, TCP traffic experiences poor performance through ports 4, 5, and 6 of the J9538A 8-port 10GbE SFP+ v2 zl Module. GVRP (CR_0000129917) - When the switch receives its own GVRP frames, it learns from them instead of dropping the frames. GVRP (CR_0000130090) - After rebooting the switch, the configuration unknown-vlans disable does not work on trunks. Return to Contents page 7 of 17
LEDs (CR_0000133898) - PoE faults cause the DIM Status LED to blink instead of the PoE Status LED. Loop Protection (CR_0000127150) - Loop protection fails to detect a loop on a port configured for 802.1X authentication, if 802.1X is not enabled globally. Management (CR_0000134091) - Disabling write access to an SNMP community via the Web user interface might cause the switch to become unresponsive to command input. The switch must be rebooted to regain management access. OpenFlow (CR_0000134471) - OpenFlow flows are not programmed correctly when RPVST+ is disabled on the OpenFlow member VLAN. Passwords (CR_0000130921) - If the switch is configured with a username and password, changing the password causes the username to also change. The username is changed to the default "manager" or "operator", depending on which password is changed. PIM (CR_0000128681) - After a large number of multicast streams are added and old streams time out, the switch might get into a state where it is unable to add new multicast streams, responding with a message similar to IpAddrMgr: Failed to allocate new SW IP multicast group, table full FIB entry. PIM (CR_0000130353) - The switch might send duplicate multicast packets when sflow is enabled and the multicast packets are routed by software. Redundant Management (CR_0000126527) - The warning message for redundancy switchover that appears on the CLI has been modified for clarity. Routing (CR_0000123230) - The switch does not forward traffic to a host that has a static route configured with a 32-bit subnet mask. Traces show that the switch never sends an ARP request for that host. sflow (CR_0000128439) - When an sflow-sampled inbound packet is to be routed, the sflow data gives the wrong output port on the switch. SNMP (CR_0000122054) - When a large number of traps are generated in a short period of time, the switch buffers might be exhausted. With this fix, switch buffers are protected by several methods, including removing duplicate/identical traps and combining individual intra-switch messages. SNMP (CR_0000122623) - After rebooting a switch configured for SNMP with the parameters operator unrestricted, the switch does not allow the user to set any read/write MIB objects. SNMP (CR_0000123582) - Including the detail parameter in the command show ipv6 ospf3 link-state areascope detail might cause infinite output. This affects the show tech all command, which includes the detail parameter. SNMP (CR_0000126364) - SNMP support for DHCP Relay Information (option 82) was inadvertantly disabled. SNMP (CR_0000129191) - When an SNMP trap destination is set for "no destinations", the log reports an entry of unknown var type when the event happens. Also, when the SNMP trap destination is set for "trap receivers only", traps are not sent. SSL (CR_0000127972) - A self-signed certificate cannot use a common name (CNAME) longer than 40 characters. With this fix, the limit is 90 characters. Stacking (CR_0000121075) - When stacking is enabled, the switch is accessible via the Web even after disabling the Web server, and via TELNET even after disabling TELNET. Return to Contents page 8 of 17
TFTP (CR_0000129475) - A switch config that has certain lines in the config file cannot be downloaded to the switch via TFTP. For example, attempting to download a config file with the valid statement distributedtrunking peer-keepalive udp-port 6400 results in the error message UDP port 6400 is already in use. Transceivers (CR_0000129775) - The switch does not turn off the laser when a port is administratively disabled, which might result in the link partner still seeing link. This has been observed with X2-SC SR Optics (J8436A) that have MYxxxxxxxx serial numbers. Transceivers (CR_0000132781) - Software does not allow the dual-speed J8177C Gigabit-copper transceiver to be configured for 100 Mbps operation, responding with a message such as Value auto-100 is not applicable to port A21. Transceivers (CR_0000133023) - 100-Megabit transceivers might have one or more of these symptoms: 1) Link LED is lit but link is down, 2) No Link after the transceiver is hot-swapped, 3) Transceiver fails self test. Uplink Failure Detection (CR_0000127868) - On a switch that is configured for uplink failure detection where the link to monitor (LtM) or link to disable (LtD) is an LACP trunk, after reboot the link to monitor is listed as down in the output of show uplink-failure-detection, and the link to disable is taken down by the switch. Version K.15.13.0004 Fix List Status: Released and fully supported, but not posted on the web. Accounting (CR_0000133762) - If a Windows system is configured for both computer authentication and user authentication, accounting might not function properly. CLI (CR_0000137287) - The output of show run vlan <VLAN_ID> omits the no in the configuration entry no ip igmp fastleave. Note that the output of show run gives correct information. Config (CR_0000135481) - After boot, a config file that has a trap destination community name with an open parenthesis "(" or a close parenthesis ")" cannot be downloaded to the switch. Distributed Trunking (CR_0000135353) - With Distributed Trunking and VRRP enabled, when both the VRRP master and backup routers reboot together, the VRRP master might not be reachable by the Distributed Trunking switches. Event Log (CR_0000127436) - After the switch uptime reaches 497 days, the timestamp entries in the event log become erratic with gaps of several hours or days. In some cases the timestamps revert to previous months and years, even though SNTP updates with those wrong timestamps report the correct date and time. Guaranteed Minimum Bandwidth (CR_0000136039) - When the switch is configured to use fewer than the default of 8 queues, packets in lower-priority queues might be unintentionally dropped. IGMP (CR_0000132149) - Although the RFC requires that the switch with the lowest IP address becomes querier, a switch that is acting as querier stops being querier when it receives a query from a switch with a higher IP address. IGMP (CR_0000135527) - A non-querier switch that receives a Join from the querier fails to send further Joins to the querier, resulting in loss of multicast traffic. IGMP (CR_0000136013) - After the switch becomes querier, it does not update the table that defines the querier port, and continues to forward IGMP packets out the port that previously led to the querier. Latency (CR_0000132667) - After a switch reboot, traffic that flows through the J9538A 8-port 10GbE SFP+ v2 zl Module experiences poor performance. Return to Contents page 9 of 17
Link (CR_0000137549) - Gigabit fiber transceivers operate in auto-negotiation mode even if the port is configured for 1000 Mbps full-duplex operation (speed-duplex 1000-full). If both sides of the link were configured as 1000- full, the link will go down after the switch at one side of the link is updated with affected software. This issue was introduced in software version 15.12.0006. MAC Authentication (CR_0000129991) - MAC Authentication fails when the peap-mschapv2 parameter is included in the aaa authentication CLI command. OSPF (CR_0000135171) - Using the Menu interface, if the user navigates to Switch Configuration -> IP Configuration and selects Save without changing anything on that screen, any OSPF configuration will be removed from every VLAN. PIM (CR_0000134883) - High CPU utilization from PIM message exchanges causes dropped multicast streams. RADIUS Accounting (CR_0000137793) - An interim-update status request generates incorrect accounting information in the RADIUS server. This issue was introduced with CR_0000123330. TFTP (CR_0000123187) - TFTP file transfers initiated via TELNET or SSH fail, if the console inactivity-timer setting causes the TELNET or SSH session to end during the transfer. This issue does not affect file transfers initiated from the console or from SFTP. Trunking (CR_0000126473) - The switch does not allow a static LACP trunk to be configured as active or passive. This fix adds a new interface command: lacp static [active passive]. Web Management (CR_0000135883) - The "Rx Errors" column is missing from the Web user interface. Web Management (CR_0000137792) - A self-signed SSL certificate generated via the Web interface cannot use a common name (CNAME) longer than 40 characters. With this fix, the limit is 90 characters. Version K.15.13.0005 Fix List Status: Released and fully supported, and posted on the web. BGP (CR_0000138230) - When BGP has equal cost routes but one route is preferred due to a higher configured weight, the outputs of show ip bgp and show ip route show that the router uses the wrong route. CLI (CR_0000137695) - The console terminal <vt100 none ansi> command is only available in config mode. With this fix, the command can be entered directly from the Manager and Operator prompts. CLI (CR_0000138041) - The command show ipv6 ospf3 link-state area-scope does not display any output when more than 25 VLANs are configured on the switch. Config (CR_0000138447) - After a switch software update, SNMP community access privileges are incorrectly changed by the switch. The output of show snmp-server and the output of a "walkmib" command give different results, and neither output represents how the switch actually behaves for Manager or Operator access. This issue was introduced with CR_0000122623; if the access settings were configured on a switch without the CR_0000122623 fix, after updating to software with the CR_0000122623 fix the settings are changed. CPU Utilization (CR_0000129968) - Entering some commands such as show flash results in very slow console response, and switch CPU utilization of 100%. Crash (CR_0000115372) - The switch might reboot unexpectedly with a message similar to NMI event SW:IP=0x00000000 MSR:0x00000000 LR:0x00000000 cr: 0x00000000 sp:0x00000000 xer:0x00000000 Task='InetServer' Task ID=0xaad3000. Return to Contents page 10 of 17
Crash (CR_0000118056) - The switch experiences a loss of free memory each time the show ip ospf link-state detail or display ospf lsdb network or display ospf lsdb router command is issued. When memory is no longer available, the switch will reboot unexpectedly with a message similar to Software exception at block.c:1165 -- in 'SIGIO Task', task ID = 0xa989fc0 -> Routing Stack: Assert Failed. Crash (CR_0000135900) - In some situations it is possible for the switch to reboot unexpectedly with a message similar to Software exception at alloc_free.c:646 -- in 'edrvpoll', task ID = 0xa9a7a80 -> buf already freed by 0x0A9A7D40, op=0x0006003e. Crash (CR_0000137288) - With SNTP configured, in a rare situation after a time update the switch might reboot unexpectedly with a message similar to Health Monitor: Invalid Instr Misaligned Mem Access HW Addr=0x31352e30 IP=0x31352e30 Task='mDebugCtrl' Task ID=0x3c9558c0 sp:0x11f92cd0 lr:0x31352e31 msr: 0x02029200 xer: 0x00000000 cr: 0x28000800. Crash (CR_0000138879) - After boot, a switch that has a syslog server and an IPv6 address configured might become unresponsive to management, and after a period of time the switch might reboot repeatedly with a message similar to NMI event SW:IP=0x001517d4 MSR:0x02029200 LR:0x0015178c cr: 0x28000400 sp:0x03aae0e0 xer:0x00000000 Task='mDebugCtrl' Task ID=0xa9f8000. Crash (CR_0000141095) - When a switch port is configured for MAC authentication with the addr-moves parameter, if a client on that port moves to a different port the switch might reboot unexpectedly with a message similar to Software exception at hwbp.c:218 -- in 'fault_handler', task ID = 0xa5df1c0 -> MemWatch Trigger: Offending task 'mwebauth'. Offending IP=0xb35494. Crash (CR_0000142271) - The v2 zl modules in a switch might reboot unexpectedly, or the switch itself might reboot unexpectedly, after repeated link toggling of v2 zl module ports or 3800 ports. Crash (CR_0000142755) - The switch might reboot unexpectedly after repeated link toggling of fiber ports. DHCP (CR_0000137877) - A switch acting as a DHCP relay agent sends two DHCP packets, one of which incorrectly has the source MAC address of the client instead of the switch. Display Issue (CR_0000140830) - When terminal length is changed from the default of 24, the config file display is truncated, and the outputs of show logging and show interfaces might be interleaved in the output of show tech all. Guaranteed Minimum Bandwidth (CR_0000138064) - When a 10-Gigabit port on a 3800 switch or v2 zl module is operating at 1-Gigabit, low priority queues might become "starved" and drop traffic. ICMP (CR_0000134682) - The switch does not log an unsolicited ICMP reply unless it has first pinged some (any) IP address. Also, unsolicited ICMP reply log messages are sometimes associated with the DEFAULT_VLAN instead of the VLAN of the incoming unsolicited ICMP reply. IGMP (CR_0000138408) - Joins sent by clients in response to a Group Specific Query are not forwarded by the Querier, causing the clients to lose the stream. IGMP (CR_0000140514) - After disabling IGMP forwarding on a port, multicast traffic incorrectly continues to flow from that port. Jumbo Frames (CR_0000137961) - When jumbo frames are enabled on any VLAN, OSPF fails to establish an adjacency after a switch reboot, and RIP updates might not be accepted by the router. Return to Contents page 11 of 17
Meshing (CR_0000143068) - Multicast traffic and unicast traffic with unknown destination addresses are not routed over the mesh. Mirroring (CR_0000134191) - IP connectivity to the mirror endpoint switch might be intermittent when remote mirroring is configured on the management VLAN, and mirroring is configured for traffic in both directions. MSTP (CR_0000134194) - With Spanning Tree enabled, configuring a live port as an admin-edge-port causes the output of show run to display a fixed path-cost for that port in the ist (for example, spanning-tree instance ist 5 path-cost 20000). Note that this is a display issue only, the switch uses the automatic path-cost based on the link speed. Multicast (CR_0000138817) - When a multicast stream is sent to a reserved multicast address, a General Query might not be not forwarded by the switch, causing clients to be dropped from the multicast stream. Nonstop Switching (CR_0000133990) - After a management module failover of an 8200zl switch configured for Nonstop switching, one or more of the following issues might be observed:. The output of show system fans displays Fan Failed for all fans.. The output of show system power-supply displays Not Present for all power supply slots.. The output of walkmib hpicfsensortable displays hpicfsensorindex.0 = 0 repeatedly.. Pressing the "LED Mode" button has no effect (the mode selection does not change). OSPF (CR_0000137616) - When the switch is configured as an OSPF neighbor, and the neighbor changes time, OSPF adjacency will temporarily drop. PIM-SM (CR_0000135871) - In some cases, a "join" from a remote host is not properly processed by the switch and the multicast traffic is not forwarded. This has been observed after a host on the same subnet as the multicast source has joined the stream, and a remote host leaves the multicast stream. Policy Based Routing (CR_0000134936) - The show statistics policy counter is not reset by the clear statistics policy command. sflow (CR_0000134427) - sflow sampling of multicast packets sometimes results in duplicate packets that can cause pixelation of video or other degradation of the multicast stream. TFTP (CR_0000132721) - Certain lines in the configuration file are sometimes incorrectly changed when imported via TFTP. For example, the configuration entry snmp-server community public unrestricted might have the unrestricted parameter removed when the config file is downloaded via TFTP. Web Management (CR_0000139666) - Customers using a browser that does not support the X-Frame-Options tag, and who have an open Web management session and then initiate another browser session, could be vulnerable to cross-frame scripting. Web Management (CR_0000140379) - A self-signed SSL certificate and a CA-generated certificate cannot use an organizationname, organizationalunitname, localityname, stateorprovincename longer than 40 characters. With this fix, the limit is 64 characters. Version K.15.13.0006 Fix List Status: Released and fully supported, but not posted on the web. Counters (CR_0000141119) - The output of show ip counters is incorrect when routing is enabled for IP, IPv6, or multicasts. Counters (CR_0000142198) - When a trunk configured for sflow polling is simultaneously queried via SNMP, all counter values for the trunk are zero. Return to Contents page 12 of 17
Counters (CR_0000143860) - On a switch configured with rapid PVST and BPDU protection, the output of the command show spanning-tree bpdu-protection shows zero errant BPDUs received, even when the switch has disabled a port due to receiving a BPDU. This is a display issue only, both rapid PVST and BPDU protection function properly. Crash (CR_0000137552) - With OSPF enabled, if one switch has jumbo frames enabled but the link partner does not, the switch might reboot unexpectedly with a message similar to Software exception at block.c:1158 -- in 'SIGIO Task', task ID = 0xa94f800 -> Routing Stack: Assert Failed. Crash (CR_0000141877) - With MSTP enabled, when the event log receives a large number of entries in a very short time, the switch might reboot unexpectedly with a message similar to Software exception at svc_misc.c:865 -- in 'mmstpctrl', task ID = 0xa953140 -> Failed to calloc 700 bytes. Crash (CR_0000143067) - Under extremely heavy traffic loads, repeated port toggling might cause the switch to reboot unexpectedly with a message similar to Software exception at bgp_tsi.c:361 -- in 'eroutectrl', task ID = 0xa95fcc0 -> Routing Stack: Assert Failed. Crash (CR_0000144879) - The switch might reboot unexpectedly in these situations: 1) The switch is running 15.08 or earlier software, is configured to drop frames that have a destination address of 01:00:0c:cc:cc:cd, and has PVST filtering or PVST protection enabled. Then the switch is updated to 15.09 or later software. 2) The switch is running 15.09 or later software, is configured to drop frames that have a destination address of 01:00:0c:cc:cc:cd, and then PVST filtering or PVST protection is enabled. The switch reboots unexpectedly with a message similar to Software exception at bttflearn.c:2616 -- in 'mlpmgrctrl', task ID = 0xa98a9c0 -> Mac Table Error. Crash (CR_0000146306) - The switch uses TCP connections internally for inter-process communication. In a situation where an internal loopback TCP socket pair receives stimulus after an extended period of idle time, the switch might reboot unexpectedly with a message similar to NMI event SW:IP=0x00e20c1c MSR:0x02029200 LR:0x00e077d0 cr: 0x44000400 sp:0x02b03c58 xer:0x00000000 Task='InetServer' Task ID=0xab31000. Distributed Trunking (CR_0000144697) - Distributed Trunking LACP links do not come up when connected to non-hp devices such as Solaris Unix systems. Mirroring (CR_0000145818) - With more than one remote mirroring session configured on a VLAN, if the user deletes a VLAN with a lower number than the VLAN being mirrored, all mirrors except the lowest-numbered mirror session are removed from the mirrored VLAN. OSPF (CR_0000134463) - When the router receives multiple duplicate LSAs in a short time period, the router does not acknowledge them all in time, which causes OSPF adjacencies to be lost and then re-formed. RADIUS (CR_0000138258) - In some situations, the switch response to "Change of Authorization" and "Disconnect Messages" from the RADIUS server is sent from an incorrect source IP address, which the RADIUS server therefore ignores. Spanning Tree (CR_0000143817) - With a switch configured for MSTP, if the spanning tree mode is changed to force-version rstp-operation and then a second management module (or stack member) is inserted, the switch might reboot unexpectedly with a message similar to Health Monitor: Read Error Restr Mem Access HW Addr=0xe59ff10c IP=0x779004c Task='mMstpCtrl' Task ID=0x13af9740 fp: 0x0d372620 sp:0x0d372604 cpsr: 0x6000001f. Return to Contents page 13 of 17
Switch Hang (CR_0000142411) - On a switch configured for Web or MAC authentication plus MSTP plus Distributed Trunking with keepalive, with high levels of reauthentication occurring on multiple ports, the switch might appear to hang and be unreachable for remote management. The console is initially accessible, but issuing a show command might cause the console to also hang. This affects LACP and LLDP protocols, as seen by neighboring switches. Transceivers (CR_0000143444) - Software does not allow the dual-speed J8177C Gigabit-copper transceiver to be configured for 100 Mbps operation, responding with a message such as Value auto-100 is not applicable to port A21. This is the same fix as CR_0000132781 in 15.13.0003, which was inadvertently removed by CR_0000126473 in 15.13.0004 software. Transceivers (CR_0000146528) - After rebooting the switch, the configuration parameter speed-duplex auto- 100 (for a J8177C gigabit-copper transceiver slot) is removed from the config file. Version K.15.13.0007 Status: Never built. Version K.15.13.0008 Fix List Status: Released and fully supported, and posted on the web. Authentication (CR_0000148832) - A switch configured with RADIUS authentication for primary login, and local authentication for secondary login fails to use local authentication when RADIUS servers do not respond. In that situation, the switch console is not accessible to valid users. BPDU Protection (CR_0000144148) - If VLAN 1 is not enabled on the link between a switch running rapid PVST and a switch running any Spanning Tree version, a rapid PVST switch configured for BPDU protection does not shut down the port when it receives a BPDU from the neighboring switch. However, the BPDUs are correctly dropped. CLI (CR_0000136134) - After issuing the command no ip ssh cipher <cipher_option>, the entry is listed twice in the output of show run. CLI (CR_0000143652) - The switch does not allow the lockout-mac command to be configured for a MAC address that is all zeros (000000-000000). Config (CR_0000145221) - The switch prompts users to save the configuration when no changes have been made. This has been observed after configuring meshing, saving the config, and rebooting the switch. Crash (CR_0000139181) - After configuring a RADIUS server for both IPv4 and IPv6, if the software is downgraded to a version that does not support RADIUS on IPv6, and then upgraded to a software version that supports RADIUS on IPV6, the switch might reboot unexpectedly with a message similar to Software exception at ip_util.c:1171 -- in 'swinittask', task ID = 0x3c971540 -> ASSERT: failed. Distributed Trunking (CR_0000148165) - When VRRP routers have Distributed Trunking enabled, VRRP failovers might result in the VRRP virtual MAC addresses (and therefore remote subnets) to become unreachable. Distributed Trunking (CR_0000148170) - A MAC address that is learned by a Distributed Trunking switch and then moved to another port might be listed on the wrong port by the peer Distributed Trunking switch, causing that MAC address to be unreachable from the peer switch. Return to Contents page 14 of 17
Enhancement (CR_0000132845) - Additional Debug Capability. This enhancement adds tracking to identify possible switch hang situations during switch boot. IPv6 (CR_0000148594) - IPv6 Router Advertisements that indicate an off-link prefix are not set as "preferred" in the switch, which causes incorrect information in the output of show ipv6, and can affect connectivity to hosts that use IPv6 Stateless Address Autoconfiguration. This issue also causes the sflow "Agent Address" to be listed as 0.0.0.0. Logging (CR_0000147833) - Some RMON events are not correctly defined for VRRP, which causes the switch to report an error such as system: Unknown Event ID 776 when those events occur. Logging (CR_0000150244) - Some RMON events are not correctly defined for fault-finder (FFI), SSL, and virus throttling, which causes the switch to report an error such as system: Unknown Event ID 776 when those events occur. PoE (CR_0000147518) - After reboot, pre-standard detection of PoE devices does not function correctly on a 2920 or 3800 stack, if the stack commander is a non-poe switch. PoE (CR_0000148808) - After disabling PoE on one or more ports, the output of show cpu slot <slot-number> shows an increase in CPU utilization of 15% or more. Policy Based Routing (CR_0000147703) - In some situations, the switch does not allow a service-policy to be removed from a VLAN, responding with the error commit failed. Workaround: Reboot the switch, then issue the no service-policy command. Rate Limiting (CR_0000147093) - If rate limiting is applied on the port that connects adjacent OSPF routers, the adjacency is lost after a switch reboot. This issue affects v2 zl modules and 3800 switches. sflow (CR_0000147660) - In an IPv6-only environment with stateless auto-configuration, sflow incorrectly uses the link-local address as the agent ID. SNMP (CR_0000147370) - After using SNMP to configure a RADIUS server on the switch, the switch does not allow a login until the switch is rebooted. SNMP (CR_0000149657) - When using the "createandwait" mode to set parameters via SNMP, multiple RADIUS servers cannot be configured. Switch Hang (CR_0000146247) - With both authentication and accounting enabled, the switch might become unresponsive to management, requiring a reboot to recover. TELNET (CR_0000142571) - While a user is being authenticated by a RADIUS server, issuing the show access-list radius all command from a TELNET session might cause the TELNET session to hang. Web Management (CR_0000149099) - When Spanning Tree Protocol (STP) is enabled via the Web user interface, "mstp" is shown as the default STP mode, and "mstp" is displayed as the operational mode after the user enables STP and saves the change. However, the command line interface shows that the switch operates in "rpvst" mode. Workaround: From the Web user interface, use the dropdown menu to explicitly select "mstp" from the dropdown options, then save the change. Version K.15.13.0009 Fix List Status: Released and fully supported, but not posted on the web. OSPF (CR_0000147711) - Link State Advertisements (LSAs) are retransmitted by the router before the retransmit timer expires. This improves the original OSPF fix (CR_0000134463). Return to Contents page 15 of 17
OSPF (CR_0000149413) - The SPF counter for OSPFv3 increments for link-state updates even if there is no topology change. Switch Hang (CR_0000147472) - After a redundancy switchover or a failover of an 8200zl switch running in Warm-standby mode, the new Active Management Module (AMM) might fail selftest and hang with a message similar to ERROR: FAILED MGMT CONDUIT LOOPBACK TEST. Version K.15.13.0010 Fix List Status: Released and fully supported, but not posted on the web. Crash (CR_0000136602) - With redundancy disabled by the no redundancy command, after the active management module is removed and then inserted (hot swapped), the switch reboots unexpectedly with a message similar to Software exception at redundantmgmtutil.c:1006 -- in 'mrdmgtctrl', task ID = 0x0 -> HW access error. Crash (CR_0000153700) - Three commands are removed from the show tech all and show tech route commands (which invoke many sub-commands): show ipv6 ospf3 link-state link-scope detail, show ipv6 ospf3 link-state area-scope detail, and show ipv6 ospf3 link-state as-scope detail. In certain situations, issuing those commands will cause the switch to reboot unexpectedly with a message similar to Health Monitor: Invalid Instr Misaligned Mem Access HW Addr=0x017cb590 IP=0x17cb590 Task='eRouteCtrl' Task ID=0xa96de00 sp:0x48cea20 lr:0x10086d4 msr: 0x02029200 xer: 0x20000000 cr: 0x44000400. Distributed Trunking (CR_0000151202) - After receiving a Join on an Inter-Switch Connection (ISC) port, the switch does not forward Joins from other ports onto the Inter-Switch Connection (ISC). Version K.15.13.0011 Fix List Status: Never released. Crash (CR_0000153524) - Entering the command show ipv6 ospf3 link-state area-scope detail might cause the switch to reboot unexpectedly with a message similar to Health Monitor: Invalid Instr Misaligned Mem Access HW Addr=0x017cb590 IP=0x17cb590 Task='eRouteCtrl' Task ID=0xa96de00, given one of the following conditions: 1) There are more than 64 OSPFv3-enabled VLANs 2) There are more than 64 neighbors on an OSPFv3-enabled broadcast link 3) There are more than 64 addresses advertised in a NAP LSA 4) There are more than 64 IPv6 addresses on an OSPFv3-enabled VLAN Switch Hang (CR_0000153460) - Issuing the boot system command while VRRP traffic is being received by the switch might cause the switch to hang and not boot completely. Switch Hang (CR_0000154152) - If the switch is sending output to the console at the time the switch is rebooted, the switch might hang and not boot properly. Version K.15.13.0012 Fix List Status: Released and fully supported, and posted on the web. Switch Hang (CR_0000154576) - With a redundant management module installed and operational, issuing the command boot standby from the Active Management Module (AMM) might cause the AMM to hang. Return to Contents page 16 of 17
Copyright 2014 Hewlett-Packard Company, L.P. The information contained herein is subject to change without notice. August 2014 Return to Contents page 17 of 17